Frame 17873: 1406 bytes on wire (11248 bits), 1406 bytes captured (11248 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:51:11.838426000 UTC UTC Arrival Time: Jul 22, 2017 02:51:11.838426000 UTC Epoch Arrival Time: 1500691871.838426000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000115000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 457.313077000 seconds] Frame Number: 17873 Frame Length: 1406 bytes (11248 bits) Capture Length: 1406 bytes (11248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 63.217.21.41, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1392 Identification: 0xbfee (49134) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 59 Protocol: TCP (6) Header Checksum: 0xdbb8 [validation disabled] [Header checksum status: Unverified] Source Address: 63.217.21.41 Destination Address: 172.16.45.52 [Source GeoIP: Tin Shui Wai, HK, ASN 3491, CONSOLE-CONNECT-ASN] [Source GeoIP City: Tin Shui Wai] [Source or Destination GeoIP City: Tin Shui Wai] [Source GeoIP Country: Hong Kong] [Source or Destination GeoIP Country: Hong Kong] [Source GeoIP ISO Two Letter Country Code: HK] [Source or Destination GeoIP ISO Two Letter Country Code: HK] [Source GeoIP AS Number: 3491] [Source or Destination GeoIP AS Number: 3491] [Source GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source or Destination GeoIP AS Organization: CONSOLE-CONNECT-ASN] [Source GeoIP Latitude: 22.4489] [Source or Destination GeoIP Latitude: 22.4489] [Source GeoIP Longitude: 113.9984] [Source or Destination GeoIP Longitude: 113.9984] [Stream index: 40] Transmission Control Protocol, Src Port: 80, Dst Port: 49192, Seq: 499501, Ack: 1468, Len: 1352 Source Port: 80 Destination Port: 49192 [Stream index: 77] [Stream Packet Number: 674] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1352] Sequence Number: 499501 (relative sequence number) Sequence Number (raw): 2763078785 [Next Sequence Number: 500853 (relative sequence number)] Acknowledgment Number: 1468 (relative ack number) Acknowledgment number (raw): 3518731413 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1032 [Calculated window size: 33024] [Window size scaling factor: 32] Checksum: 0xfd6f [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.580382000 seconds] [Time since previous frame in this TCP stream: 0.000231000 seconds] [SEQ/ACK analysis] [iRTT: 0.081306000 seconds] [Bytes in flight: 2704] [Bytes sent since last PSH flag: 91936] TCP payload (1352 bytes) Hypertext Transfer Protocol File Data: 1352 bytes Data (1352 bytes) 0000 75 a5 81 33 fc f9 38 c4 df 8a e6 23 d6 be 13 61 u..3..8....#...a 0010 ba 9d 04 b8 36 e1 29 93 9b 7a 5f 2b 5e f4 db 79 ....6.)..z_+^..y 0020 e1 5a f2 82 24 c0 77 9a c2 d6 42 ec 7b 33 2c 68 .Z..$.w...B.{3,h 0030 dd 62 e2 16 1c f6 4b 98 6d db 42 e8 ac c7 96 4d .b....K.m.B....M 0040 ab 54 6c da f8 33 ac 5b f3 df b1 7a d5 bf 61 b5 .Tl..3.[...z..a. 0050 80 7c 0d 81 4e 1b df c4 c7 d1 e1 09 38 d4 49 2b .|..N.......8.I+ 0060 1d ea c6 c2 f5 1e 3c bc 21 13 9c 63 78 37 2f 55 ......<.!..cx7/U 0070 2a b7 18 77 f0 6e e9 1e 5e 2c 12 e4 1c 29 2d cf *..w.n..^,...)-. 0080 bf c0 a1 83 7d c8 0a 4e 40 7e 50 04 4a a5 db 66 ....}..N@~P.J..f 0090 04 47 32 51 61 68 88 8d 44 6b 62 14 3a d3 a3 71 .G2Qah..Dkb.:..q 00a0 a8 20 01 c7 f3 e3 71 b2 80 c1 cf f5 64 41 2c 6d . ....q.....dA,m 00b0 2c 0e 17 2b e3 69 e3 29 18 a8 4d c3 48 53 26 c6 ,..+.i.)..M.HS&. 00c0 5b b2 31 d9 5e 8c 2b 7b aa 71 ed 40 1d ae 1e 68 [.1.^.+{.q.@...h 00d0 60 34 63 e2 40 2d 46 f7 d5 10 da b5 18 e9 ac 21 `4c.@-F........! 00e0 d4 25 f7 ad 01 7c b2 bd 1a e3 04 fc 44 6b 21 c6 .%...|......Dk!. 00f0 9b f2 30 2a db bc 31 46 ab d3 09 86 54 5c 2e 4b ..0*..1F....T\.K 0100 44 77 49 1c ce 16 c4 e1 18 6f 22 67 db da 30 37 DwI......o"g..07 0110 f7 12 f7 e7 bf c5 78 ef 14 ae 9d 39 83 41 29 41 ......x....9.A)A 0120 6c e4 4d a3 a9 10 bd 0d 79 98 38 ba 17 bf 78 fb l.M.....y.8...x. 0130 1e 7f fb db 3f f0 97 3f fd 0e 87 78 93 90 76 ac ....?..?...x..v. 0140 5b 08 ee cd 9b 4c f9 79 9a 62 cb 66 53 de 1c 2d [....L.y.b.fS..- 0150 54 5a c5 dc dc 0a 56 16 36 d8 61 65 4b b0 5b 10 TZ....V.6.aeK.[. 0160 f0 db 60 6b 6b a7 ea c8 5d 5d 3d d4 2a 4e e9 39 ..`kk...]]=.*N.9 0170 1e 6a 08 20 c4 03 d5 b6 6d a1 a1 fe 6a 43 e5 90 .j. ....m...jC.. 0180 00 57 04 48 75 8a db 4e 78 ca f7 e9 6a 01 47 47 .W.Hu..Nx...j.GG 0190 4b de 14 cc d5 cd 77 ed 97 04 f8 e6 0d b0 b2 a2 K.....w......... 01a0 e5 db ed e4 a8 6b 87 b1 c5 b0 39 c1 6c 49 2b df .....k....9.lI+. 01b0 a1 a0 2c b0 16 d3 76 a6 9d bb 38 ee 50 e0 76 e0 ..,...v...8.P.v. 01c0 cf e4 e7 8e 2a ac e1 e0 60 05 47 07 6b fe 7c 27 ....*...`.G.k.|' 01d0 6f 02 3b f8 9c ef a3 99 bb ba 48 a9 24 ed dd d5 o.;.......H.$... 01e0 9e 8f 6d e1 c5 11 80 87 e7 0e de 80 ac 79 b4 a6 ..m..........y.. 01f0 9d db 22 c0 d7 0e 7a 3f 69 87 6b 47 f1 b0 57 bb .."...z?i.kG..W. 0200 47 85 d0 d0 a5 35 6e 90 de 15 a1 41 52 dd e2 06 G....5n....AR... 0210 83 58 7a 88 23 52 62 3c 91 15 ef 85 7c ca 51 39 .Xz.#Rb<....|.Q9 0220 6d b5 96 b0 6b ce f6 c1 9e 5c 3d 0e e5 05 e3 44 m...k....\=....D 0230 71 10 ce 96 10 a6 04 ef 25 01 b5 4a 8f 18 d4 26 q.......%..J...& 0240 11 43 9f ac 3b ec 07 10 8f f8 01 c4 83 d5 51 45 .C..;.........QE 0250 65 88 8a be 8a 40 f4 f1 a6 d0 5f c6 f7 d0 c0 07 e....@...._..... 0260 ca c3 d4 62 33 15 45 11 aa c4 b0 97 36 2e 39 f1 ...b3.E.....6.9. 0270 1e e3 82 9f 8f 46 de 2d 13 ae 92 56 31 1a b9 82 .....F.-...V1... 0280 b8 34 c1 fa b8 39 84 98 b8 54 ac 48 d5 89 74 2c .4...9...T.H..t, 0290 cc f0 fd 7e c9 fd ff 04 e2 1f 73 e2 1f 61 fe 59 ...~......s..a.Y 02a0 a8 7f 04 21 10 8d e8 e0 38 c4 86 24 73 f8 92 89 ...!....8..$s... 02b0 a4 84 62 64 a6 56 22 33 b7 85 10 df 8f ec b2 93 ..bd.V"3........ 02c0 c8 ae 3d 87 bc e6 41 e4 74 8c a3 60 df 75 14 10 ..=...A.t..`.u.. 02d0 e2 f9 87 ef 22 f7 c8 3d e4 10 e0 39 04 77 16 9f ...."..=...9.w.. 02e0 67 1e ba 83 ec 83 77 14 c4 8b 14 c4 67 51 de 75 g.....w.....gQ.u 02f0 87 10 bf 8b ba b3 84 38 41 de 7a 7e 06 bb 2e dc .......8A.z~.... 0300 c5 81 fe 39 1c 19 98 c7 d1 d1 05 9c 1e 7f 80 f3 ...9............ 0310 93 8b b8 70 6d 11 97 af 2c 33 78 bc 3a 8f 9e 6b ...pm...,3x.:..k 0320 f3 e8 9f d2 f6 e3 1c 96 d4 ca ad 25 8c cc ac 60 ...........%...` 0330 72 76 05 d7 ee 3f c5 f5 f9 67 c6 94 ca 1b dc 7f rv...?...g...... 0340 fc 1e 2b 2f 68 df af bf c1 93 b7 bf c0 d3 77 bf ..+/h.........w. 0350 c4 93 f7 bf c4 b3 77 bf e2 e3 5f e0 09 9f 3f a6 ......w..._...?. 0360 99 4b 8a 65 59 26 3f 1f bd c4 c2 f2 63 cc 3e 58 .K.eY&?.....c.>X 0370 c2 8d d9 7b b8 3e 75 0b 93 93 53 18 1c 18 c5 85 ...{.>u...S..... 0380 ee 5e 9c 38 7e 1a 7b f7 ee 43 5b 63 03 aa 4b 72 .^.8~.{..C[c..Kr 0390 51 98 11 cf 51 4a 30 32 a3 fd 90 1d e3 4b 98 fb Q...QJ02.....K.. 03a0 23 27 c6 4f 2d ca 91 3d 2d f3 a5 82 24 49 a0 2d #'.O-..=-...$I.- 03b0 70 97 d7 bd 18 be ea 71 5e 42 a0 96 7a a1 8d 57 p......q^B..z..W 03c0 e6 ca 24 69 18 4a a4 2e 36 39 40 35 a4 92 95 99 ..$i.J..69@5.... 03d0 d9 32 2b 1f eb a7 86 8c c9 b1 5e 88 0b 77 53 a5 .2+.......^..wS. 03e0 82 b1 06 e3 92 f8 20 7b a3 79 ef a4 41 33 a4 ea ...... {.y..A3.. 03f0 44 6f a7 52 22 12 ca be bd cd 14 c8 f5 5e 02 72 Do.R"........^.r 0400 da 34 ed db db d5 44 b3 70 d7 ed aa e2 24 2c d0 .4....D.p....$,. 0410 46 fb 7d a1 8e fc f7 52 1f 6e 89 10 31 76 5f 0b F.}....R.n..1v_. 0420 0e 6d 6d 95 c9 fb 7b 6c e7 b0 9b 17 bc fd 16 58 .mm...{l.......X 0430 5b 6d 52 4d ae c4 c0 65 f7 1e 65 e2 26 04 39 a1 [mRM...e..e.&.9. 0440 23 ad 67 4d b6 ac c6 d6 0d 5f 60 db c6 2f b0 69 #.gM....._`../.i 0450 ed cf b0 76 f5 7f a5 89 7f 8e 75 eb 56 11 12 9f ...v......u.V... 0460 f3 f1 bf 61 fd ea ff 8d 17 6d 00 5a eb 68 ba 7d ...a.....m.Z.h.} 0470 a7 31 77 ad 07 2b 37 2e e3 c5 9d 31 b5 eb cf 07 .1w..+7....1.... 0480 b1 f1 c5 59 82 fc 1e 5e 2d 2f e0 dd ca 32 1e 2f ...Y...^-/...2./ 0490 bf c0 8d 5b 2f 51 5b b6 0f b9 21 89 04 78 14 ca ...[/Q[...!..x.. 04a0 0d e1 a8 8a 8e 45 43 7c ac 71 ab c0 38 ec cf 4d .....EC|.q..8..M 04b0 c6 e1 82 64 1c 2b 4c c4 c9 a2 14 9c 2c 4e c2 f9 ...d.+L.....,N.. 04c0 aa 34 9c af 49 a4 89 65 d3 82 b3 31 d4 94 83 e1 .4..I..e...1.... 04d0 96 5c 4c 76 56 61 8a f0 be 76 b0 19 57 0f b5 11 .\LvVa...v..W... 04e0 e0 ad 18 3f d8 c4 63 3d 26 f6 6b 16 3e 46 1b 1f ...?..c=&.k.>F.. 04f0 dd 45 b0 77 54 11 e0 34 f5 b6 02 8c 37 e7 d2 e4 .E.wT..4....7... 0500 b3 31 5a 9b 8d e1 da 4c 46 3a fa ab 92 09 89 44 .1Z....LF:.....D 0510 9c 2b 4a e2 4d 24 11 97 3a db f1 6c e9 35 16 1f .+J.M$..:..l.5.. 0520 fe 0a 77 e7 bf c1 d5 81 9b 98 3a 73 1e 63 07 f7 ..w.......:s.c.. 0530 a0 bf bd 56 e5 dc a5 ff ca b9 ba 22 dc 19 1c c1 ...V.......".... 0540 1f 7f f3 7b fc f1 af 7f ...{.... Data […]: 75a58133fcf938c4df8ae623d6be1361ba9d04b836e129939b7a5f2b5ef4db79e15af28224c0779ac2d642ec7b332c68dd62e2161cf64b986ddb42e8acc7964dab546cdaf833ac5bf3dfb17ad5bf61b5807c0d814e1bdfc4c7d1e10938d4492b1deac6c2f51e3cbc21139c6378372f552ab [Length: 1352]